Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: xw8P+DQWQilrnRuIKfLCIyKDxv+Fp8YpVze7zlU5q2c=
Subject key identifier: 6F:C9:6A:2F:BA:90:B7:1F:D5:49:E8:4F:B2:38:FC:C1:0D:DB:E3:23
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 01958C601F9C8233A7CEF610EE31E183BDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0A70
Signing time: Wed 12 Mar 2025 22:01:04 +0000
Manifest this update: Wed 12 Mar 2025 22:01:04 +0000
Manifest next update: Thu 13 Mar 2025 22:01:04 +0000
Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: kbzGy1gOAqfr9uWw0CzcbWW5gZoe75/qc5tHAM6J1ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:1f:9c:82:33:a7:ce:f6:10:ee:31:e1:83:bd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Mar 12 22:01:04 2025 GMT
Not After : Mar 13 22:01:04 2025 GMT
Subject: CN=6fc96a2fba90b71fd549e84fb238fcc10ddbe323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:42:5e:59:a9:64:ff:67:fa:61:fd:1e:60:
6a:83:be:45:50:ae:5f:cc:8d:a1:1b:20:9e:b4:dc:
91:72:c0:0d:8a:1d:71:f9:52:8d:50:ff:5a:18:d4:
fd:91:d5:4c:03:c6:85:20:e6:a9:76:a5:51:9a:65:
3b:72:de:73:92:9d:be:ff:a1:d8:36:04:de:0b:57:
85:7a:5c:73:ce:df:61:d5:79:f1:4a:cf:cb:5a:53:
2f:85:aa:84:15:c3:ee:08:30:e7:7e:21:f9:df:25:
7b:29:52:3b:ec:06:66:ce:81:d1:65:60:b3:2d:b1:
f2:a4:14:79:a0:7f:0a:11:97:c5:0d:36:d9:3d:c1:
25:82:cd:ea:9f:fd:2b:d9:06:79:f2:4c:68:aa:22:
17:49:6f:cd:95:c4:c6:6e:ad:6e:f1:c9:77:91:ed:
2c:fa:46:97:93:49:21:72:ac:71:a7:d8:a3:c1:58:
e4:60:0a:0a:d4:73:2a:9b:4d:8d:79:54:61:61:c7:
ed:b2:38:fb:ed:60:2b:a1:24:06:ae:b9:55:07:8c:
90:c7:43:01:3b:e1:f3:7c:57:e1:f9:5f:4e:94:6c:
c3:74:a6:97:35:8d:bf:8a:c8:d4:48:20:b5:d4:02:
fe:26:de:a8:e0:c2:d0:40:6d:ea:10:02:6c:21:c8:
36:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C9:6A:2F:BA:90:B7:1F:D5:49:E8:4F:B2:38:FC:C1:0D:DB:E3:23
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dc:00:c1:8d:05:af:24:72:3e:71:ab:7e:d1:54:11:eb:27:
fc:ff:48:fc:c7:6c:9a:6d:01:a0:ab:4d:fb:60:b8:fc:2c:3b:
d1:2f:9e:a3:7f:78:17:49:df:76:ef:7d:ae:86:37:d7:ca:37:
37:d3:1e:38:da:31:6e:7f:49:94:df:1b:95:35:05:7d:3d:25:
d2:00:5f:05:e0:5d:bf:1e:a8:d3:ad:2a:7d:0d:d8:71:12:6d:
b8:c1:63:fa:3c:54:4a:b4:a7:03:b6:20:72:e7:13:d2:19:2c:
59:9d:eb:ac:73:2d:3f:be:da:d4:be:96:29:bb:5f:b6:bc:ef:
c5:5d:cc:33:bb:de:7c:27:ee:9e:ca:00:e7:1d:9b:c2:c1:cd:
91:65:f9:47:9b:06:0a:aa:c8:f6:05:e2:53:ff:85:90:59:18:
e1:fd:c6:d0:d9:d3:5d:c2:a0:b5:d8:93:aa:07:16:41:9e:ca:
5b:2e:8f:68:5f:57:03:36:f1:0a:d8:d9:1b:8f:14:96:ab:5c:
23:34:3c:ab:de:4e:af:38:e2:47:61:a9:9d:1b:cf:64:38:be:
4e:18:ef:b5:c5:b7:89:d5:21:8a:01:f5:81:49:69:bb:78:60:
c9:5f:ae:35:06:ed:e6:3c:0e:7d:5d:ab:31:e5:3c:d9:d3:38:
49:67:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:27 2025 by rpki-client